CVE-2026-35321: Critical severity Oracle Oracle WebCenter Content vulnerability
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. While the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable HTTP access to Oracle WebCenter Content if it is not required. If HTTP is required, restrict access to trusted management networks and specific IP ranges so the service is not publicly exposed.
Oracle WebCenter Content HTTP access = disabled or restricted to trusted IPs - Compensating control
Restrict access to Oracle WebCenter Content HTTP ports at the perimeter and internal firewalls to only trusted IP ranges; block/untrusted traffic at network edge.
- Compensating control
Deploy a web application firewall (WAF) or virtual patching in front of Oracle WebCenter Content and create rules to detect and block exploitation attempts over HTTP.
- Compensating control
Isolate hosts running Oracle WebCenter Content from other critical systems and limit lateral movement by using network segmentation and access controls.
- Operational
Monitor application and network logs for indicators of exploitation, investigate for signs of compromise, and perform incident response if evidence of takeover is found. If compromise is confirmed, rebuild affected hosts and rotate any credentials or keys that may have been exposed.
- Operational
Monitor Oracle security advisories for Oracle WebCenter Content and apply vendor-supplied patches or updates as soon as they become available.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35321?
CVE-2026-35321 has a critical severity rating of 9.9.
How do I fix CVE-2026-35321?
To mitigate CVE-2026-35321, it is essential to apply the latest security patches provided by Oracle.
Who is affected by CVE-2026-35321?
CVE-2026-35321 affects users of Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0.
What impact does CVE-2026-35321 have on my system?
Exploitation of CVE-2026-35321 allows a low privileged attacker with network access to compromise Oracle WebCenter Content.
What type of vulnerability is CVE-2026-35321?
CVE-2026-35321 is a vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware.